CCNP&CCIE Security SCOR思科认证网络工程师题库3.docx

《CCNP&CCIE Security SCOR思科认证网络工程师题库3.docx》由会员分享，可在线阅读，更多相关《CCNP&CCIE Security SCOR思科认证网络工程师题库3.docx（29页珍藏版）》请在三一办公上搜索。

1、CCNP/CCIESecuritySCOR题库3QUESTION1WhichfunctiondoesafabricedgenodeperforminanSD-Accessdeployment?A. Connectsendpointstothefabricandforwardstheirtraffic.B. Encapsulatesend-userdatatrafficintoLISP.C. ConnectstheSD-AccessfabrictoanotherfabricorexternalLayer3networks.D. Providesreachabilitybetweenbordern

2、odesinthefabricunderlay.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION2Refertotheexhibit.RI#shrunbeginlineconlineconOexectimeoutOOprivilegelevel15loggingsynchronousstopbits1lineauxoexectimeoutOOprivilegelevel15loggingsynchronousstopbits1linevtyO4password7045802150C2Eloginlinev

3、ty515password7045802150C2EIosin1endRI#shrunincludeaaaenablenoaaanew-modelRI#WhichprivilegelevelisassignedtoVTYusers?A. 1B. 7C. 13D. 15CorrectAnswer:ASection:(none)ExplanationExpIanationZReference:QUESTION3WhatisthedifferencebetweenaRIBandaFIB?A. TheFIBispopulatedbasedonRIBcontent.B. TheRIBmaintainsa

4、minorimageoftheFIB.C. TheRIBisusedtomakeIPsourceprefix-basedswitchingdecisions.D. TheFIBiswhereallIProutinginformationisstored.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION4WhichrequirementforanAnsible-managednodeistrue?A. ItmusthaveanSSHserverrunning.B. ItmustbeaLinuxservero

5、raCiscodevice.C. Itmustsupportadhoccommands.D. ItmusthaveanAnsibleTowerinstalled.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION5AclientdevicefailstoseetheenterpriseSSID,butotherclientdevicesareconnectedtoit.Whatisthecauseofthisissue?A. Theclienthasincorrectcredentialsstoredfor

6、theconfiguredbroadcastSSID.B. ThehiddenSSIDwasnotmanuallyconfiguredontheclient.C. ThebroadcastSSIDwasnotmanuallyconfiguredontheclient.D. TheclienthasincorrectcredentialsstoredfortheconfiguredhiddenSSID.CorrectAnswerBSection:(none)ExplanationExpIanationZReference:QUESTION6WhichtwodescriptionsofFIexCo

7、nnectmodeforCiscoAPsaretrue?(Choosetwo.)A. APsthatoperateinFIexConnectmodecannotdetectrogueAPs.B. Whenconnectedtothecontroller,FIexConnectAPscantunneltrafficbacktothecontroller.C. FIexConnectmodeisafeaturethatisdesignedtoallowspecifiedCAPWAP-enabledAPstoexcludethemselvesfrommanagingdatatrafficbetwee

8、ndentsandinfrastructure.D. FIexConnectmodeisawirelesssolutionforbranchofficeandremoteofficedeployments.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:Reference:2/configuration/guide/cg/cg_flexconnect.htmlQUESTION7WhichOSPFnetworktypesarecompatibleandallowcommunicationthroughthetwopeer

9、ingdevices?A. point-to-multipointtononbroadcastB. broadcasttononbroadcastC. point-to-multipointtobroadcastD. broadcasttopoint-to-pointCorrectAnswer:BSection:(none)ExplanationExpIanationZReference:Reference:QUESTION8WhichNGFWmodeblocksflowscrossingthefirewall?A. tapB. inlineC. passiveD. inlinetapCorr

10、ectAnswerBSection:(none)ExplanationExpIanationZReference:Reference:QUESTION9WhichstatementaboutroutetargetsistruewhenusingVRF-Lite?A. Routetargetscontroltheimportandexportofroutesintoacustomerroutingtable.B. WhenBGPisconfigured,routetargetsaretransmittedasBGPstandardcommunities.C. Routetargetsallowc

11、ustomerstobeassignedoverlappingaddresses.D. Routetargetsuniquelyidentifythecustomerroutingtable.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION10HowdoesCiscoTrustSecenablemoreflexibleaccesscontrolsfordynamicnetworkingenvironmentsanddatacenters?A.usesflexibleNetFIowB.assignsaVLA

12、NtotheendpointC. classifiestrafficbasedonadvancedapplicationrecognitionD. classifiestrafficbasedonthecontextualidentityoftheendpointratherthanitsIPaddressCorrectAnswerDSection:(none)ExplanationExpIanationZReference:Reference:engineZat_a_glance_c45-726831.pdfQUESTION11Refertotheexhibit.Rldebugipospfh

13、elloRlfdebugconditioninterfaceFa.0lCondition1SetRefertotheexhibitWhichstatementabouttheOPSFdebugoutputistrue?A. TheoutputdisplaysOSPFhellomessageswhichrouterRlhassentorreceivedonintrfaceFaOl.B. TheoutputdisplaysOSPFmessageswhichrouterRlhassentorreceivedonallinterfaces.C. TheoutputdisplaysOSPFmessage

14、swhichrouterRlhassentorreceivedoninterfaceFaOl.D. TheoutputdisplaysOSPFhelloandLSACKmessageswhichrouterRlhassentorreceived.CorrectAnswer:ASection:(none)ExplanationExpIanationZReference:QUESTION12WhichLISPinfrastructuredeviceprovidesconnectivitybetweennon-LISPsitesandLISPsitesbyreceivingnon-LISPtraff

15、icwithaLISPsitedestination?APnRBmapresoercmapSerVerDPETRCoITeCfAnSWeKASeCt-On:(none)EXP-anatonEXP-aCIaWOrVReferenCe-Referencettps:、/www2.scooom、c、en、us、td、docs、soct-ons、Enterpr-SRDatalcenteryDC-、50、L-SPmob三tyDC-IL-splHoStIMOb三tyL-SPmob=el2htm-QUEST-ON13Wh-Ch-WoProSCo-SareUSedW-thYANGdatamode2(ChooSe

16、-Wo)ATLSBRESTCoNFcSSHDNETCONFmHpsCoITeCtAnSWerBDSec-On:(none)EXP-anato,nEXParo-rReference-QUEST-ON14Wh-ChHTTPStarUSCOde-SrheCOlTeCrreSPOnSeforrequest:W一rhan-FICOITeCtPaSSWOrdapp=edSRESTAP-session?AHTTPStarUSCOd他2。B.HTTPStatUSCode-302cHTTPsrrusCode-401DHTTPSratUSCod曾504CorreCtAnSWer:CSection:(none)EX

17、P-anato,nExpIanationZReference:Reference:https:/developer.mozilla.org/en-US/docs/Web/HTTP/Status/401QUESTION15TheloginmethodisconfiguredontheVTYlinesofarouterwiththeseparameters. ThefirstmethodforauthenticationisTACACS IfTACACSisunavailable,loginisallowedwithoutanyprovidedcredentialsWhichconfigurati

18、onaccomplishesthistask?A.Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogintelnetgrouptacacs+noneaaasession-idcommonRl#shrunsectionvtylinevtyO4Rl#shrunincludeusernameRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogindefaultgrouptacacsaaasession-idcommonRl#shrunsectionVtylinevtyO4transportinpu

19、tnoneRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationloginVTYgrouptacacs+noneaaasession-idcommonRl#shrunsectionVtylinevty04password702050D480809Rl#shrunIincludeusernameRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogindefaultgrouptacacs+noneaaasession-idcommonRl#shrunsectionVtylinevty04paSSWO

20、rd702050D480809Rl#shrunIincludeusernameRI#CorrectAnswerDSection:(none)ExplanationExpIanationZReference:QUESTION16WhichstatementaboutmulticastRPsistrue?A. RPsarerequiredonlywhenusingprotocolindependentmulticastdensemode.B. RPsarerequiredforprotocolindependentmulticastsparsemodeanddensemode.C. Bydefau

21、lt,theRPisneededperiodicallytomaintainsessionswithsourcesandreceivers.D. Bydefault,theRPisneededonlytostartnewsessionswithsourcesandreceivers.CorrectAnswerDSection:(none)ExplanationExpIanationZReference:Reference:https:/www.cisco.eom/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/rps.h

22、tmlQUESTION17Toincreasetotalthroughputandredundancyonthelinksbetweenthewirelesscontrollerandswitch,thecustomerenabledLAGonthewirelesscontroller.WhichEtherChanneImodemustbeconfiguredontheswitchtoallowtheWLCtoconnect?A. ActiveB. PassiveC. OnD. AutoCorrectAnswerCSection:(none)ExplanationExpIanationZRef

23、erence:Reference:https:/CommUQUESTION18WhichfeaturedoesCiscoTrustSecusetoprovidescalable,securecommunicationthroughoutanetwork?A. securitygrouptagACLassignedtoeachportonaswitchB. securitygrouptagnumberassignedtoeachuseronaswitchC. securitygrouptagnumberassignedtoeachportonanetworkD. securitygrouptag

24、ACLassignedtoeachrouteronanetworkCorrectAnswerBSection:(none)ExplanationExpIanationZReference:Reference:networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdfQUESTION19AnengineerconfiguresaWLANwithfasttransitionenabled.SomelegacyclientsfailtoconnecttothisWLAN.Whichfeatureallowsthelegacyclientst

25、oconnectwhilestillallowingotherclientstousefasttransitionbasedontheirOUIs?A. overtheDSB. 802.11kC. adaptiveRD. 802.11vCorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION21Anetworkadministratorisimplementingaroutingconfigurationchangeandenablesroutingdebugstotrackroutingbehaviorduri

26、ngthechange.Theloggingoutputontheterminalisinterruptingthecommandtypingprocess.Whichtwoactionscanthenetworkadministratortaketominimizethepossibilityoftypingcommandsincorrectly?(Choosetwo.)A. Configuretheloggingsynchronousglobalconfigurationcommand.B. Configuretheloggingsynchronouscommandunderthevty.

27、C. Increasethenumberoflinesonthescreenusingtheterminallengthcommand.D. Configuretheloggingdelimiterfeature.E. PresstheTABkeytoreprintthecommandinanewline.CorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:QUESTION22WhichtwopiecesofinformationarenecessarytocomputeSNR?(Choosetwo.)A.transmi

28、tpowerB.noisefloorC.日RPD.RSSIE.antennagainCorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:Reference:QUESTION23WhichstatementsareusedforerrorhandlinginPython?A. try/catchB. catchreleaseC. block/rescueD. try/exceptCorrectAnswer:DSection:(none)ExplanationExpIanationZReference:QUESTION24W

29、hataretwobenefitsofvirtualizingtheserverwiththeuseofVMsinadatacenterenvironment?(Choosetwo.)A. reducedrackspace,power,andcoolingrequirementsB. smallerLayer2domainC. increasedsecurityD. speedydeploymentE. reducedIPandMACaddressrequirementsCorrectAnswer:ADSection:(none)ExplanationExpIanationZReference

30、:QUESTION25WhichtwostepsarerequiredforacompleteCiscoDNACenterupgrade?(Choosetwo.)A. automationbackupB. systemupdateC. goldenimageselectionD. proxyconfigurationE. applicationupdatesCorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:QUESTION26WhatisabenefitofdatamodelinglanguageslikeYANG?A

31、. TheycreatemoresecureandefficientSNMPOIDs.B. Theyprovideastandardizeddatastructure,whichresultsinconfigurationscalabilityandconsistency.C. Theyenableprogrammerstochangeorwritetheirownapplicationswithinthedeviceoperatingsystem.D. TheymaketheCUsimplerandmoreefficient.CorrectAnswer:BSection:(none)Expl

32、anationExpIanationZReference:QUESTION27Refertotheexhibit.NameisBobJohnsonAgeis75isaliveFavoritefoodsare: Cereal Mustard OnionsWhatistheJSONsyntaxthatisformedfromthedata?A. Name:BobJohnson,Age:75,Alive:true,FavoriteFoods:Cereal,Mustard,OnionsB. “Name:uBobJohnsontAge：75,Alive:true,uFavoriteFoods:,Cere

33、a,uMustard,OnionsC. ,Name,:*BobJohnson,Age,:75,Alive,:True,TavoriteFoods:*Cerea,lMustard,Onions,D. uName:BobJohnson,uAgen:Seventyfive1,Alive:true,uFavoriteFoods:uCerea,uMustard,OnionsCorrectAnSWe匚BSection:(none)ExplanationExpIanationZReference:QUESTION28Basedonthisinterfaceconfiguration,whatistheexp

34、ectedstateofOSPFadjacency?Rl:interfaceGigabitEthernet0/1ipaddress192.0.2.1255.255.255.252ipospf1area0ipospfhello-interval2ipospfcost1endR2:interfaceGigabitEthernetO/1ipaddress192.0.2.2255.255.255.252ipospf1area0ipospfcost500endA. 2WAYDROTHERonbothroutersB. notestablishedC. FULLonbothroutersD. FLLBDR

35、onRlandFLLBDRonR2CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION29Refertotheexhibit.GO/OLinklGO/OSW2#showspanning-treeVlanoooiSpanningtreeenabledprotocolIeeeRootIDPriority32769Address5000.0005.0000Cost4Port1(GigabitEthernet0/0)HelloTime2secMaxAge20secForwardDelay15secBridgeIDP

36、riority32769(priority32769sys-id-ext1)Address5000.0006.0000HelloTime2secMaxAge20secForwardDelay15secAgingTime300secInterfaceRoleStsCostPrio.IibrTypeGi00GiO/lRootFWD4128.1P2pAltoBLW432.2P2p1.inklisacopperconnectionandLink2isafiberconnection.Thefiberportmustbetheprimaryportforallforwarding.Theoutputof

37、theshowspanning-treecommandonSW2showsthatthefiberportisblockedbyspanningtree.Anengineerentersthespanning-treeport-priority32commandonG0lonSW2,buttheportremainsblocked.WhichcommandshouldbeenteredontheportsthatareconnectedtoLink2toresolvetheissue?A. Enterspanning-treeport-priority4onSW2.B. Enterspanni

38、ng-treeport-priority32onSWl.C. Enterspanning-treeport-priority224onSWl.D. Enterspanning-treeport-priority64onSW2.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION30WhichJSONsyntaxisvalid?A,1,switch:name：*,distlt-interfaces*:gig,gig2,ugig3B.uswitch:/,namen:dist,/“interfaces/”:ugi

39、gl,ugig2,gig3C. “switch：name:udistl,“interfaces”:4,gig,gig2,ugig3D. switch:(name:,distl,interfaces:,gigl,gig2,gig31)CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION31A. WhataretwocommonsourcesofinterferenceforWi-Finetworks?(Choosetwo.)B. 1.EDlightsC. radarD. firealarmE. conventi

40、onalovenF. rogueAPCorrectAnswer:AESection:(none)ExplanationExpIanationZReference:QUESTION32WhenusingTLSforsyslog,whichconfigurationallowsforsecureandreliabletransportationofmessagestoitsdefaultport?Alogginghost10.2.3.4vrfmgmttransporttcpport514B. logginghost10.2.3.4vrfmgmttransportudpport514C. loggi

41、nghost10.2.3.4vrfmgmttransporttcpport6514D. logginghost10.2.3.4vrfmgmttransportudpport6514CorrectAnswerCSection:(none)ExplanationExpIanationZReference:Reference:https:/tools.ietf.org/html/rfc5425QUESTION33WhichbehaviorcanbeexpectedwhentheHSRPversionischangedfrom1to2?A. Nochangesoccurbecausethestandb

42、yrouterisupgradedbeforetheactiverouter.B. Nochangesoccurbecauseversion1and2usethesamevirtualMACOUI.C. EachHSRPgroupreinitializesbecausethevirtualMACaddresshaschanged.D. EachHSRPgroupreinitializesbecausethemulticastaddresshaschanged.CorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTIO

43、N34WhichprotocoldoesRESTAPIrelyontosecurethecommunicationchannel?A. HTTPB. SSHC. HTTPSD. TCPCorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION35Refertothisoutput.RI#*Feb1437:09:53.129:%LINEPR0T0-5-UPD0WN:LineprotocolonInterfaceGigabitEthernetO/1,changedstatetoupWhatistheloggingseveritylevel?A. notificationB. emergencyC. criticalD. alertCorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION36Refertotheexhibit.Rl#showipbgpBGPtableversionis32,localrouterDis192.168.1